at32-ide-bin

maintainer taotieren · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a prebuilt IDE binary from the official ArteryTek domain, which is the legitimate vendor; despite the static analyzer flag for a non-standard host, the source is trustworthy and the package installs only vendor-provided development tools without executing unverified remote code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt IDE binary from the official ArteryTek domain, which is the legitimate vendor; despite the static analyzer flag for a non-standard host, the source is trustworthy and the package installs only vendor-provided development tools without executing unverified remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:40 source=("${_pkg_file_name}.zip::https://www.arterytek.com/download/AT32%20IDE/${_pkg_file_name}.zip")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: taotieren <admin@taotieren.com>
2
3pkgname=at32-ide-bin
4pkgver=1.0.14
5pkgrel=1
6# epoch=1
7pkgdesc="AT32 IDE 是个跨平台 ARM 嵌入式系统的软件开发环境。 它包含一系列的 Eclipse 插件和工具。该插件可让用户在 AT32 IDE 开发环境下创建、建置和调试 AT32
8MCU。"
9arch=('x86_64')
10url="https://www.arterytek.com/cn/support/tools.jsp"
11license=('LicenseRef-scancode-commercial-license')
12provides=(at32-ide AT32IDE)
13conflicts=(at32-ide AT32IDE)
14replaces=()
15depends=(
16 # java-runtime
17 bash
18 gcc-libs
19 glibc
20 hidapi
21 libusb
22 java-runtime
23 perl
24 python
25 zlib
26)
27makedepends=(
28 libarchive
29 sed
30)
31optdepends=('artery-isp-console: Artery ISP Console 是一款基于 MCU Bootloader 的命令行应用程序。使用该应用程序,用户可以通过 UART 端口或者 USB 端口配置操作 Artery 的 MCU 设备。'
32 'at32-ide-project-generate: AT32 IDE 是个跨平台 ARM 嵌入式系统的软件开发环境。 它包含一系列的 Eclipse 插件和工具。该插件可让用户在 AT32 IDE 开发环境下创建、建置和调试 AT32 MCU。'
33 'at-link-console: Artery AT LINK Console 是一款基于 MCU Bootloader 的命令行应用程序。支持AT32 MCU「在电路编程」Console工具'
34 'at32-work-bench: AT32 MCU 图形化配置软件,生成初始化 C 代码(目前仅支持 AT32F421 系列)'
35 'jlink-software-and-documentation: Segger JLink software & documentation pack for Linux')
36backup=()
37options=(!strip !emptydirs !staticlibs)
38install=${pkgname}.install
39_pkg_file_name=AT32_IDE_V${pkgver}_Linux-${arch}
40source=("${_pkg_file_name}.zip::https://www.arterytek.com/download/AT32%20IDE/${_pkg_file_name}.zip")
41sha256sums=('e975168e5a23ce48fa774abec39bb087f3f40cb5aa366d05c742a49b1c81237b')
42noextract=(${_pkg_file_name}.zip)
43
44package() {
45 bsdtar -xf ${srcdir}/${_pkg_file_name}.zip -C ${srcdir}/
46
47 install -dm0755 "${pkgdir}/opt/artery32/${pkgname%-bin}/"
48
49 bsdtar -xf ${srcdir}/AT32IDE_V${pkgver}_Linux-X86_64.tar.gz -C "${pkgdir}/opt/artery32/${pkgname%-bin}/"
50
51 install -Dm0755 /dev/stdin "${pkgdir}/usr/bin/${pkgname%-bin}" <<EOF
52#!/bin/bash
53/opt/artery32/${pkgname%-bin}/AT32IDE "\$@"
54EOF
55
56 chmod 664 "${pkgdir}/opt/artery32/${pkgname%-bin}/AT32IDE.ini"
57
58 install -Dm0644 "${pkgdir}/opt/artery32/${pkgname%-bin}/icon.xpm" "${pkgdir}/usr/share/pixmaps/${pkgname%-bin}.xpm"
59
60 install -Dm0644 "${pkgdir}/opt/artery32/${pkgname%-bin}/OpenOCD/contrib/60-openocd.rules" "${pkgdir}/etc/udev/rules.d/60-openocd-${pkgname%-bin}.rules"
61 sed -i 's|openocd_rules|openocd_at32_ide_rules|g' "${pkgdir}/etc/udev/rules.d/60-openocd-${pkgname%-bin}.rules"
62
63 install -Dm0644 /dev/stdin "${pkgdir}/usr/share/metainfo/com.arterytek.at32ide.metainfo.xml" <<EOF
64<?xml version="1.0" encoding="UTF-8"?>
65<component type="desktop-application">
66 <id>com.arterytek.at32ide</id>
67
68 <name>AT32IDE</name>
69 <summary>AT32IDE</summary>
70
71 <metadata_license>MIT</metadata_license>
72 <project_license>GPL-2.0-or-later</project_license>
73
74 <description>
75 <p>
76 AT32 IDE 是个跨平台 ARM 嵌入式系统的软件开发环境。 它包含一系列的 Eclipse 插件和工具。该插件可让用户在 AT32 IDE 开发环境下创建、建置和调试 AT32
77MCU。
78 </p>
79 </description>
80
81 <launchable type="desktop-id">com.arterytek.at32ide.desktop</launchable>
82</component>
83EOF
84
85 install -Dm0644 /dev/stdin "${pkgdir}/usr/share/applications/com.arterytek.at32ide.desktop" <<EOF
86[Desktop Entry]
87Version=1.0
88Type=Application
89
90Name=AT32IDE
91Comment=AT32IDE
92Categories=Development;Electronics;
93
94Icon=${pkgname%-bin}
95Exec=${pkgname%-bin}
96Terminal=false
97EOF
98 chown -R root:root "${pkgdir}/"
99}
100

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion